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hj ■ Abstract 



Plots of quadratic residues display some visual features that are analyzed math- 
ematically in this paper. The graphical patterns of quadratic residues modulo 
m depend only on the residues of m modulo the lowest positive integers. 



H 

^' . 1 Introduction 

,S^ ' The quadratic residue (QR) of an integer x modulo m is the remainder a of the 

jrt . division of x^ by m. It is expressed by the congruence, 



X = a (mod m), 

where the residue class a can be represented by an integer from to ttt- — 1. Figure 1 
^ ' shows a typical plot of QRs where a rather chaotic distribution can be appreciated. 

l/^ , As X and in — x have the same QR, then only those QRs corresponding to < 

\l ' X < m/2 are represented. It is not surprising that QRs modulo a big integer of 

^^ , unknown factorization are used in cryptography and random sequence generators 

^— V ' PJ. Nevertheless, they always show a remarkable presence of points that seem 

■.— j- , to draw multiple "acute parabolas" that spread along the graphic. A closer look 

f^ ' confirms that the acute parabolas have a quite regular distribution, for values of x 

near simple fractions of the modulus in a quantity related to the denominator of 
the fraction, so that a lower number of best defined acute parabolas correspond to a 

a simpler fraction . Not only QRs, but also n-power residues spread as integer points 

of sets of n-degree polynomials for x values near a fraction of the modulus as it is 
^ I stated in [2] . In that paper, it was shown that some of those "acute parabolas" can 

be used to obtain low quadratic residues used in the factorization of large integers. 
^ , In fact, those parabolas correspond to the Montgomery polynomials of the MPQS 

j^ ' (Multipolynomial Quadratic Sieve) 01 E] and HMPQS (Hypercube MuUipolynomial 

Quadratic Sieve) jSj factorization algorithms. 

A detailed treatment of the presence and regular disposition of the "acute parabo- 
las" is done in Section 2. Nevertheless, such features can be explained in a rather 
informal way with a fairly straightforward reasoning. Let be an integer x and a 
modulus m and consider the difference between the square of x and its nearby in- 
tegers, i.e. A = (a; + i)^ — x^ = 2ix + i^, when x is the closest integer to a fraction 
a/b of the modulus. We consider small i values and neglect the term i^. A second 
approximation is done replacing x by {a/b)m, so A f« {2ia/b)m. If b is odd, the 
residue of the fraction {2ia/b)m modulo m is another fraction {a'/b)m with a' = 2ia 
(mod b) because 2ia = a' + kb for some integer k. When b is even, we can note that 
A Ks (ia/b')m with b' = 6/2 and its residue modulo m is the fraction {a' /b')m with 
a' = ia (mod b'). Therefore, the QRs for values near x are spaced approximately 
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Figure 1. Quadratic residues mod 20171. 



by multiples of m/h' . The term i^, which is not considered in this approximation, 
accounts for building the parabolas at regular intervals. 

Functions involving QRs have been used to generate computer graphics. The 
function f(x,y) = x^ + y^ (mod m) shows concentric circles with centres at coor- 
dinates that are made up of simple fractions of the modulus. They are actually, 
truncated paraboloids present in this bi-dimensional case (sec fig. 2). Another type 
of patterns can be observed sometimes in QRs plots besides the "acute parabo- 
las" . For some moduli, it may happen that the outlines of broader diffused "ghost 
parabolas" materialize, as can be observed in fig. 1 and fig. 3. These kind of patterns 
are analyzed in Section 3. To conclude, we can state that the graphical patterns 
of QRs mod m plots depend only on the residues of m modulo the lower positive 
integers. 

2 The geometry of the "acute parabolas" 

The congruence relation is a relation of equivalence between integers. Nevertheless, 
a similar relation between rationals can be established: 

Definition 1 Two rationals, s and t, are Q-congruent modulo an integer m when 
(s — t)/m is an integer and then we can write 

s =Q t (mod to) and s = t + km, 

for some integer k. 

Q-congruence relation is refiexive, symmetric and transitive as well as the con- 
gruence relation between integers. Moreover, two congruent integers are also Q- 
congruent. Therefore, the notation "=" between rationals must be read as "=q" 
and when the relation is between integers, it can be read in both ways. 



Graphical patterns in quadratic residues 



m-l 




m-1 



Figure 2. Function f{x, y) = {x^ + ?/^) mod 415. 



Let TO be a modulus and ajh an irreducible fraction. We define the integer xq 
and its quadratic residue tq as 



Xq 



a 

—m 

b 



, Xq — rQ (mod m) , 



(1) 



where [x~\ = [x + 1/2J, that is, the nearest integer to x. 
Proposition 1 vq is the nearest integer to the rational l3(m/b'^) where 

(3 = a m — 2aa (mod b ) with a = am (mod b), \a\ < b/2. 

Proof. We note that xq = {am — a)/b from the definition of the integer a and then, 

2 a'^m'^ — 2aam a^ f a'^m — 2aa — 13\ „m o? 



62 



62 



62 



"^ + ^'52 + 52 



With the definition of /3, the term (a2TO, — 2aoi — P)/b'^ becomes an integer. Taking 
into account that |a| < 6/2, we can then write 



? 2 

^0-/^52 + 52" (^o'l "^)' < -p- < 1/4 . 



(2) 

D 



We now calculate the QRs of integers near xq. From the considerations explained 
in the introduction, it becomes natural to consider lattice points defined by 

6, if 6 odd 



x = xo+^+J6', with &' = |^/2, if 6 even ' I*' ^ ^'/2, J G ^m- (3) 
Expanding the square of the trinomial, we have 

x^ = (a;o + if + fb'"^ + 2{xq + i)jb' . 
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Taking into account that xo = {am — a)/b and with r and r^ as the quadratic 
residues of x and xq + i respectively, we can write 

,,2 .2 , „ /,, . Q:\ . , /IN ^ f 1, if & odd. ... 

r^b' J^ + 2[b'^--)J+n (modm), c ^ - = | ^^ .^ ^ ^^^^^^ (4) 

Proposition 2 T/ie quadratic residues of integers near {a/b)m split as integer 
points of b parabolas if b is odd, or 6/2 parabolas if b is even, with their vertices 
placed at Xy — {a/b)m and equidistant in between. 

Proof. It is clear that Q) is a parabola under variable j for each one of the b' values 
of i in |(21l. Those parabolas will be named as Pi{j). The coordinates at the vertex 
are given when the derivative of Q) with respect to j becomes null. Since r^ is fixed 
for each i value they are given by 

J. = ^-^, P.{J.)^r,-[^~^)\ 

Substituting the value of ji, in (O, and taking into account that xq = {ain — a)/b, 
the coordinate at the vertex is Xy — {a/b)m which is independent from i value. 
Then, all parabolas related to the fraction a/b have vertices at the same x value. 

Since {xq + i)^ — Xq + 2ixo + i"^, then r^ = tq + 2i{am — ct)/b + i^ (mod m). 
Replacing Vi and simplifying we obtain, 

2 

m c^ 
PiiJv) ^ J'o + 2ia- -J (mod m) . 

Taking the value of ro from jSJ, we obtain. 



Tfi Tfi 

PiiJv) = P-pr +2ai— (mod m) 

0^ 



Let be 



2 

—ia 
c 



(mod b'), 



with c as defined in Q). Then 



m m 

P^iJ^)=P-+a'- (modm). (5) 

As much as i runs over Z^/ and gcd(a, 6') = 1, a' takes all values in Z^/. From the 
above equation, it follows that vertices of Pi{j) lie exactly at multiples of m/6^ and 
are separated by exact gaps of m/b'. This concludes the proof. D 

3 Patterns 

Propositions 1 and 2 give account of the number and position of the "acute parabo- 
las". Near x = {a/b)m, b parabolas (or 6/2 if 6 is even) appear and all are 
equidistant in Z^. Figure 2 shows a representation in gray levels of the func- 
tion f{x,y) = {x^ + y^) (mod m). It is remarkable the symmetry of the graphic 
because it displays all the range of variables in Z^ ■ There is only one paraboloid 
at each node related to fractions 0/1, 1/2 and 1/1. That corresponds to centre, 
corner and the midpoint of the sides of fig. 2. Such paraboloids have a sharp profile 
form and they are surrounded by rings due to truncations. Two paraboloids are 
present at each node related to 1/4 and 3/4 producing more fuzzy patterns. Other 
patterns alike can be observed for more complex fractions. 
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At first glance, when plots like fig. 1 are observed, the presence of "acute parabo- 
las" and their positions can be recognized. Since b = b'c, equation JSJ can be 

rewritten as 

(3 m ,m 
P^W = -7T7 + a T7 (modm). 



ebb' b' 



Let P' = (3 (mod c6), then 



n / ■ N (3' + sbcm ,m 

P^W= ^^ y+"6^ (modm), 

for some integer s. 

Taking k = s + a' , we have 

TTl Tfl 

P^(j^^) = l3'-+k- (modm), keZb'. (6) 

If the set of parabolas Pi corresponding to the fraction a/b is considered as a 
whole, without paying attention to the position of any single parabola in the set, 
the above equation shows that their position is defined only by the value of /3'. 
Proposition 1 shows that f3 (and also (3') depends only on m for each fraction a/b. 
Since the sets of parabolas corresponding to the simplest fractions are those that 
are relevant to the eye, it follows that the general appearance of a plot only depends 
on the values of m mod cb for the lowest values of b, that is for cb — 4, 3, 8, 5, 12, • ■ • . 

Let us consider the integer 

A(n) == 2 LCM(2, 3,4 •••«). 

For example, let A = A(9) == 2"^ • 3^ • 5 • 7 = 5040. Plots of QRs modulo integers 
that are congruent modulo A will have the parabolas corresponding to fractions 
with denominator equal or less than 9 in the same position. Moreover, since cb 
divides A for fe = 10, 12, 14, 15, 16, 18 • • ■ , the parabolas related to fractions with 
these denominators will also have the same position. As an example, Figures 3(a) 
and 3(b) have the same appearance, but for their density, because the modules are 
4A + 19 and 5A + 19 respectively and then /? mod cb do not change when 6 < 9 
or 6 = 10; 12, 14, 15, 16, 18 •• •. Furthermore, we can prove that the vertices are 
rational points of a bundle of lines. 

Proposition 3 Let the integers A, m and s be such that s = m (mod A) and let 
B be the set of positive integers b such that b\A ifb is odd or 2b\A ifb is even. The 
vertices of the parabolas defined in Proposition 2 associated to fractions a/b with 
b G B are rational points of the bundle of lines of the form 

n , , X x'^ (mod m) 

Y = 2nX-sX^ modi, n = 0, ±1, ±2, • • • , X ^ —, Y ^ ^ -. 

m m 

Proof. The relative position of the vertices depends on the value of P mod cb as it 
was justified above. When b is odd, c = 1 and the expression of f3 in Proposition 1 
can reduce to (3 = —a^m (mod b). If 6 is even, c = 2. We put a = am — kb, for an 
integer k such as \a\ < 6/2. Then, (3 = a'^m — 2a{am — kb) (mod 6^), that reduced 
to mod 25 is also f3 = —a^in (mod 26). We conclude that /3 = —a^m (mod c6) for 
any parity of 6. Note that, from the definition of A and s, we have that when 6 G S, 
s = m (mod c6) and then f3 = —sa^ (mod cb). From Proposition 2 and equation 
© , it follows that the vertices of the parabolas are at 

11 a^ ck 

Xy = Xy/m = a/b, Y^ = Piijv)/m = (/3 mod c6)7^ + fc— = ^s — + — (mod 1). 
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Note that ck = 2na (mod b) can always be solvable in n for any value of /c G Z^/ 
and for any parity of b. Note also that n can take any value with the appropriate 
value of fc G Z(,>. Then, we have that Y^ = — sp- + 2n|- = —sX^ + 2nXy for some 
n. D 

When s = the bundle of quadratics degenerates in straight lines( fig. 3(c)) that 
are outlined due to the accumulation of points near the vertices. As s has a higher 
absolute value, the straight lines bend into parabolas as can be seen in fig. 3 (d) 
and 3(e). When s has absolute value as high as in fig 3(f), the lines of the bundle 
have such a high slope that they do not allow to notice the "ghost parabolas" . 

To conclude, we have shown that Proposition 1, 2 and 3 explain the main visual 
features of QR plots and that those features are related solely with the residues of 
m modulo the lower positive integers. 
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(b) m = 5A +19 
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(c) m = 4A 
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Figure 3. Plots of quadratic residues, X = x/m, Y = {x^ mod m)/m, A = 5040. 



